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Abstract: 

An interactive communication system comprises a central controller (1); and at 
least one remote unit (9) connected in use to a display device (12), the central 
controller (1) generating signals in accordance with a service function, access to 
all or part of which is restricted. The signals are supplied to the remote unit(s) (9) 
for display on the display device (12). The or each remote unit (9) includes a 
processor (14), responsive to signals from the central controller (1), and 
selectively connectable to the central controller to transmit information back to 
the central controller. The or each remote unit (9) further comprises an input 
device (16) and a control memory (17) connected to the processor (14), the input 
device (16) allowing a user to enter information, and the control memory (17) 
storing access control data. The processor (14) is responsive to the access 
control data to allow a user to gain access to the restricted part of the service 
function, and periodically supplies data to the central controller (1) related to said 
access. The central controller (1) can generate signals which are supplied to the 
remote unit(s) (9) to modify the access control data. The processor (14) is adapte 
24d 

d to modify the access control data in the control memory (17) to allow additional 
access, independently of the central controller (1). 
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(54) Interactive communication system 

(57) An interactive communication system compris- 
es a centra! controller (1); and at least one remote unit 
(9) connected in use to a display device (12), the central 
controller (1) generating signals in accordance with a 
service function, access to all or part of which is restrict- 
ed. The signals are supplied to the remote unit(s) (9) for 
display on the display device (12). The or each remote 
unit (9) includes a processor (14), responsive to signals 
from the central controller (1), and selectively connect- 
abletothe central controller to transmit information back 
to the central controller. The or each remote unit (9) fur- 
ther comprises an input device (16) and a control mem- 



ory (17) connected to the processor (14), the input de- 
vice (16) allowing a user to enter information, and the 
control memory (17) storing access control data. The 
processor (14) is responsive to the access control data 
to allow a user to gain access to the restricted part of 
the service function, and periodically supplies data to 
the central controller (1 ) related to said access. The cen- 
tral controller (1) can generate signals which are sup- 
plied to the remote unit(s) (9) to modify the access con- 
trol data. The processor (14) is adapted to modify the 
access control data in the control memory (1 7) to allow 
additional access, independently of the central control- 
ler (1). 



CM 
CM 

00 

m 
oo 

o 

Q. 
LU 



STUDIO 



COMBINER 



Fig.1. 



INPUT 




CENTRAL 
CONTROLLER 




OUTPUT 



STORE 



f PSTN \, 



o 




RECEIVER 





18-^ 



TEL 

l/F 



PROCESSOR 
INPUT k 



10 



CONTROL 
MEMORY 



ROM | I 



Printed by Jouve. 75001 PARIS (FR) 



1 



EP 0 858 225 A1 



2 



Description 

The invention relates to an interactive communica- 
tion system for use in conjunction with transmitted, dis- 
play control signals. 

Interactive communication systems are known in 
which a central controller is provided which generates 
signals which are broadcast simultaneously with a TV 
broadcast to one or more remote units each of which is 
connected to a local TV receiver and monitor. These 
systems allow local users or viewers to play games and 
the like, usually related to a programme being broad- 
cast. 

in some cases, there is a need to restrict access to 
certain games or other service functions provided by the 
central controller, for example those where a payment 
is required. 

EP-A-0 128555 describes a prepaid pay-per-view 
television method and apparatus in which predeter- 
mined credit unit amounts are periodically transmitted 
from a central station to the remote subscriber subse- 
quent to a request from the subscriber and appropriate 
payment. These credit units are then stored locally and 
if they are sufficient, a user is allowed to gain access to 
a restricted access television programme or the like. EP- 
A-0595354 describes the use of an IC card holding a 
prepaid credit which can be inserted into a subscribers 
remote unit, again to allow access to a restricted access 
programme. 

These known systems have the disadvantage that 
it is necessary for the subscriber apparatus to obtain 
credit information from the central station either directly 
or via a credit card or the like. It also means that if a 
subscriber has insufficient credits he is unable to gain 
access to the restricted access programme without pur- 
chasing more credit units from the central station or oth- 
er credit unit supplier which will involve time and there- 
fore the risk of missing the programme. 

In accordance with one aspect of the present inven- 
tion, an interactive communication system comprises a 
central controller; and at least one remote unit connect- 
ed in use to a display device, the central controller gen- 
erating signals in accordance with a service function, ac- 
cess to all or part of which is restricted, the signals being 
supplied to the remote unit(s) for display on the display 
device, wherein the or each remote unit includes a proc- 
essor, responsive to signals from the central controller, 
and being selectively connectable to the central control- 
ler to transmit information back to the central controller, 
the or each remote unit further comprising an input de- 
vice and a control memory connected to the processor, 
the input device allowing a user to enter information, and 
the control memory storing access control data, the 
processor being responsive to the access control data 
to allow a user to gain access to the restricted part of 
the service function, and periodically supplying data to 
the central controller related to said access, wherein the 
central controller can generate signals which are sup- 



plied to the remote unit(s) to modify the access control 
data, and wherein the processor is adapted to modify 
the access control data in the control memory to allow 
additional access, independently of the central control- 
5 ler. 

In accordance with a second aspect of the present 
invention, we provide a remote unit for use in an inter- 
active communication system according to the first as- 
pect of the invention, the remote unit being connected 

10 in use to a display device and including a processor, re- 
sponsive to the signals from a central controller defining 
one or more service functions, access to or all or a part 
of which is restricted, to generate displays on the display 
device and being selectively connectable to the central 

is controller to transmit information back to the central con- 
troller, the remote unit further comprising an input device 
and a control memory connected to the processor, the 
input device allowing a user to enter information, where- 
in the control memory stores access control data, the 

20 processor being responsive to the access control data 
to allow a user to gain access to the restricted part of 
the service function, and periodically supplying data to 
the central controller related to said access and wherein 
the processor is adapted to modify the access control 

25 data in the control memory to allow additional access. 
We have realised that in many cases, it is not es- 
sential to maintain a minute by minute audit of the ac- 
cess control data. The processor can thus act independ- 
ently of the central controller In practice, some relaxa- 

30 tion of this control can be allowed which, although it may 
carry some risk that accesses will not be paid for, has 
significant benefits in user acceptability. Furthermore, it 
significantly reduces the number of times which the re- 
mote unit must communicate with the central station. 

35 This does not have to occur on each occasion that the 
access control data is modified but can occur periodi- 
cally. The reduction in communication with the central 
controller also minimises the likelihood of users being 
unable to gain access at busy times. 

40 Usually, however, the control memory will contain 
data defining a limit to which the processor can modify 
the access control data in the control memory to allow 
additional access in response to a user request. This 
enables the system operator to maintain some control 

45 over the access control data, for example by setting a 
local credit limit which cannot be exceeded without ref- 
erence to the central controller. 

Typically the processor is adapted to communicate 
information to the central controller concerning modifi- 

50 cations made by the processor to the access control da- 
ta to allow additional access, on the next occasion when 
other data is communicated to the central controller Typ- 
ically, the processor is adapted to connect to the central 
controller to pass information relating to past access to 

55 the restricted part of the service function when more 
than a predetermined amount of such use has occurred. 
For example, the processor may maintain a count of the 
number of accesses and when this count exceeds a 
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threshold the information is communicated to the central 
controller. In other cases, the remote unit processor may 
pass information to the central controller relating to the 
access control data whenever contact is made with the 
central controller for some other reason or on specific 
request from the central controller or if no contact has 
been made for a predetermined period. 

Typically, the processor is adapted to modify the ac- 
cess control data in response to a request from a user 
via the input device. Thus, if the user sees that his credit 
limit is reducing, he can simply input a request to in- 
crease his credit limit. Providing the result of the request 
(i.e. the amount of the increase) satisfies the predeter- 
mined conditions, for example the overall credit limit is 
not exceeded, then the access control data will be in- 
cremented accordingly. 

In some cases, in addition or alternatively, the proc- 
essor is adapted to modify the access control data in 
dependence upon the user's response to signals from 
the central controller. This option is useful where the 
service function comprises a game or the like and where 
a prize can be awarded in the form of additional access 
control data. In this case, the signals from the central 
controller may represent the same or a different service 
function. 

The access control data may comprise information 
defining the service function to which access is to be 
allowed. In this way, it is possible to allow access to cer- 
tain service functions but not others. Preferably, howev- 
er, the central controller provides more than one restrict- 
ed access service function, the processor being respon- 
sive to the access control data to allow access to any 
one of the service functions. 

This is a particularly useful aspect of the invention 
which should be contrasted with conventional systems 
in which access control is service function specific. 

Typically, the supply of data to the central controller 
will be via the selectively operable connection although 
in some cases the processor could cause the data to be 
stored on a portable medium, such as a smart card, 
which is then sent to the central controller. 

A large variety of service functions with which this 
invention can be used are envisaged. These include 
shopping, games which may or may not offer value priz- 
es, betting such as fixed odds bets on horse racing, fan- 
tasy teams and the like. Furthermore, the system may 
be used with service functions which have sections free- 
ly available to users and other sections which are re- 
stricted. For example, in the case of a skill based game, 
the ability to win a value prize will be restricted while the 
ability simply to play the game will be unrestricted. In the 
case of betting, access to that part of the service function 
which allows a value bet to be placed may be restricted 
while pseudo-bets which have no value can be placed 
by others who do not have access to the restricted part 
of the service function. 

The access control data can take a variety of forms 
and in a very simple form it could be based on a known 



approach using a key which, if present, allows the user 
to gain access but if not present prevents access. In a 
more sophisticated approach, the access control data 
is in the form of a record of a number of "tokens" which 
s usually will have been purchased by the user. In one 
example, the access control data comprises a count de- 
fining a number of allowed accesses to the restricted 
part of the service function. Where the access control 
data comprises tokens then the count may correspond 
to a number of tokens with typically one token required 
per access. In other cases, for particular high value serv- 
ice functions, the count may be decremented more than 
once when access is allowed. 

It will be understood that the various memories de- 
scribed above could be constituted by different sections 
of a common memory or separate stores. 

Typically, the remote unit will communicate with the 
central controller via a medium different from the medi- 
um carrying the display control signals and signals from 
the central controller, for example via a public switched 
telephone network, satellite communication or the like. 

Preferably, the system is for use in conjunction with 
transmitted, display control signals, wherein each re- 
mote unit is adapted to receive the display control sig- 
nals and provide a corresponding visual display. The 
display control signals can be supplied in any known 
manner. Typically, they will be supplied in the form of a 
TV broadcast but other forms of delivery such as the 
Internet could be used. Furthermore, the transmission 
medium can have any conventional form, for example 
by terrestrial aerials, satellite communication, or cable 
communication. Typically, the signals from the central 
controller will be transmitted to the remote units using 
the same transmission medium as the display control 
signals and in the preferred arrangement the two sets 
of signals are combined together. For example, the sig- 
nals from the central controller could be transmitted 
within a vertical blanking interval of a normal TV signal. 
In other approaches, different media could be used to 
transmit the two signals. The signals from the central 
controller may include signals which define data/graph- 
ics for display or the display device, often simultaneous- 
ly with the display control signals, as well as control data 
for the remote unit. 

An example of an interactive communication sys- 
tem according to the invention will now be described 
with reference to the accompanying drawings, in which:- 

Figure 1 is a schematic block diagram of the sys- 
tem; 

Figure 2 illustrates an example of the screen dis- 
plays produced when a user purchases tokens; 
and, 

Figure 3 illustrates an example of the screen dis- 
plays seen by a user when joining a tokens only 
game. 

The system shown in Figure 1 comprises, at a cen- 
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tral location, a central controller 1 which will include a 
computer, connected to an input device 2 such as a key- 
board and/or mouse and the like and to an output device 
3 which may include a monitor and/or printer. Data re- 
lating to service functions and remote users is contained 
in a store 4 which can be accessed and amended by the 
central controller 1 . The central controller 1 generates 
data, which can be converted to TV display signals and 
other control signals associated with various service 
functions, on a land line 5 connected to a combining unit 
6 defining an insertion point. The combining unit 6 re- 
ceives television broadcast signals from a studio 7 (or 
outside broadcast) and combines these with the signals 
on the line 5, which it converts to TV signals or compat- 
ible data signals, so that they are transmitted simulta- 
neously by a transmitter 8 to remote users of whom 
there may be many hundred. In other arrangements, the 
signals from the central controller 1 and the studio 7 are 
transmitted separately. 

The signals supplied to the combiner 6 may be 
transmitted to the remote users within a vertical banking 
interval (VBI) of the normal TV signal or on a separate 
radio FM-SCA channel or other data format such as a 
cable modem. 

Each remote user has a home or remote unit 9 hav- 
ing a television receiver 10 connected to an aerial 11 
and a monitor 12. The home unit 9 includes an address/ 
databus 1 3 connected to the receiver 1 0, the bus 1 3 be- 
ing connected to a microprocessor 14, a memory 15, 
such as a ROM, storing programme instructions for the 
processor 14, one or more input devices 16 such as a 
keyboard or mouse, and a control memory (RAM) 17. 
Signals transmitted by the processor 1 4 can be commu- 
nicated to the central controller 1 via a public switched 
telephone network (PSTN) 18 which is accessed by a 
telephone interface unit 19 connected to the bus 1 3. 

The central controller 1 can be controlled by a cen- 
tral operator to provide a variety of service functions to 
the remote users. One example of such a service func- 
tion is a game, typically associated with the TV broad- 
cast. Conventionally, the central controller 1 can allow 
remote users to take part in simultaneously transmitted 
quiz shows and the like. 

The invention allows further enhancements of such 
a system to be achieved. In this case, the control mem- 
ory 1 7 is loaded with access control data, representing 
tokens which are obtained by the remote user on pay- 
ment of money to the system operator. The payment 
transaction can be carried out manually or automatically 
following which the central controller 1 will transmit, as 
part of the signals fed along the line 5 to combiner 6, 
data specifically addressed to the home unit 9 which de- 
fines a number of tokens corresponding to those which 
have been purchased. Alternatively, this data could be 
sent to the remote unit via the PSTN 1 8 or another com- 
munication medium with which the remote unit can op- 
erate. This number is stored in the control memory 17 
by the processor 1 4. 



The tokens allow the remote user to gain access to 
certain restricted service functions or parts of service 
functions provided by the central controller 1 . For exam- 
ple, a game may be offered by the central controller 1 
5 for which there are value prizes, typically one or more 
additional tokens. To gain access to this game, when it 
is offered, the user indicates via the input device 16 to 
the processor 14 that he wishes to play the game and 
the processor 14 determines from information related to 
10 the game transmitted to it by the central controller 1 how 
many tokens are required. The processor 1 4 then de- 
termines from the control memory 17 whether or not 
there are sufficient tokens and if there are, allows sig- 
nals transmitted to it relating to the game to be proo- 
fs essed and displayed on the monitor 12 and, at the ap- 
propriate time, will transmit data relating to the user's 
performance through the PSTN 18 to the central con- 
troller 1 . In addition, the processor 1 4 will adjust the data 
stored in the control memory 17 to reduce the number 
20 of tokens stored by the appropriate amount. Further- 
more, the processor 14 may increment another stored 
value defining the number of tokens used, which can be 
transmitted later to the central controller 1 for audit pur- 
poses. 

25 In the case of a horse race with fixed odds betting, 
the tokens are used as bets and the processor 14 will 
only enable access to the requested betting level if suf- 
ficient tokens are stored in the control memory 17. In 
this case, the TV signals fed to the combiner 6 may con- 

30 stitute a live transmission of the horse race allowing the 
user to bet on the outcome while watching the horse 
race. 

When the user wishes to increase the number of 
tokens in the control memory 17, this is done primarily 

35 by purchasing further tokens in a conventional manner. 
When purchased, the number of tokens in the memory 
17 is incremented by the central controller 1. However, 
the present invention also enables the home unit 9 to 
increment the number of tokens independently of the 

40 central controller 1. Figure 2 illustrates a series of screen 
displays which will appear on a monitor 12 under the 
control of a processor 14 during a request for further 
tokens. As shown in Figure 2, Screen 1 has a series of 
icons, one of which is named Tokens. Using the input 

45 device 1 6 the user selects this icon and Screen 2 is dis- 
played. This screen indicates at 20 the number of tokens 
available as defined by the content of the control mem- 
ory 17. In this case, there are no tokens available. The 
user then has to enter a PI N via the input device 1 6 and 

so this is checked by the processor 1 4 against a presto red 
PIN within the control memory 17. If the PIN is not cor- 
rect then the message will be redisplayed to enter the 
PIN. 

If the PIN is correct, Screen 3 is displayed which 
55 provides four purchase options for the user. In this ex- 
ample, one token costs 50p and the user can select 1 , 
5, 10 or 20 tokens. The user indicates the number via 
the input device 16. The processor 14 then sums the 
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number of tokens defined as remaining in the control 
memory 17, those used since the last communication 
with the central controller, and those requested and 
compares this sum with a prestored credit limit, in this 
example 60 tokens. This credit limit is also stored in the s 
control memory 17. If the proposed purchase will result 
in a total number of tokens not exceeding the credit limit 
then Screen 4 will be displayed indicating the number 
of tokens requested and requesting confirmation from 
the user that this is correct. Once confirmation has been 10 
given via the input device 16, the selected number 
(twenty in this case) will be summed with the remaining 
number in the control memory 1 7. The processor 1 4 will 
also update a purchase record defining the number of 
tokens purchased since the last communication with the is 
central controller 1 . If the credit limit is exceeded then 
Screen 5 is displayed and the content of the control 
memory 17 is unchanged. 

The transaction which has been carried out will not 
be communicated immediately to the central controller 20 
1. Instead, the processor 14 will wait until a connection 
needs to be made, for example during the playing of an- 
other game, or on receiving a specific request from the 
central controller 1 , or if the total of transactions not for- 
warded to the central controller exceeds a threshold, or 25 
if no connection has been made for a predetermined 
time, and will then transmit to the central controller 1 via 
the PSTN 1 8 details of all the transactions since the last 
communication. This information is processed by the 
central controller 1 which will cause an appropriate in- 30 
voice to be generated by the output device 3, which can 
be sent to the user for payment. At the same time, the 
central controller 1 will update the remote user's record 
in the store 4. The store 4 may also hold a larger credit 
limit than the home unit 9 and if the central controller 1 35 
finds that this credit limit is being approached or even 
exceeded, suitable warnings can be sent to the output 
device 3 and at the same time the central controller 1 
may prohibit that home unit from accessing further re- 
stricted service functions or processing further token re- 40 
quests. 

Figure 3 illustrates a set of screen displays which 
will be produced when a user wishes to access a game 
for which token payment is required. Initially, the central 
controller 1 will cause the processor 1 4 to produce a dis- 45 
play on the monitor 12 (Screen 1) indicating that a to- 
kens only game is available. If the user indicates via the 
input device 16 that he wishes to play that game, the 
processor 14, using information supplied from the cen- 
tral controller 1 , will indicate on the screen the number so 
of tokens required (Screen 2). If the user accepts the 
offer, a reconfirmation screen (Screen 3) is displayed 
and if this is confirmed, the game will be displayed and 
the processor 14 will allow inputs to be processed and 
stored and, if appropriate, transmitted later to the central 55 
controller 1 (Screen 4). 

If following a request to play the game (Screen 2) 
the processor 14 determines that there are insufficient 



tokens in the control memory 17, Screen 5 will be dis- 
played and the user can either abort at this point (Screen 
9) or request further tokens (Screen 6) and the process 
described above in connection with Figure 2 will then 
proceed. It will be seen that the Screens 7 and 8 in Fig- 
ure 3 correspond to Screens 3 and 4 in Figure 2. Fol- 
lowing purchase of sufficient tokens, the user can then 
request again to play the tokens only game. 

Records of all transactions are stored by the home 
unit until the memory space allocated is full, after which 
each new addition results in the deletion of the oldest 
record. Typically, every time the home unit calls the cen- 
tral system, it logs details of all its stored token transac- 
tion records. 

In the preferred example the data stored by the 
home unit includes: tokens it has issued, tokens it has 
requested from the central controller, tokens it has been 
granted by the central controller, free tokens it has been 
granted, tokens it has issued as prizes, also tokens it 
has spent and what it spent them on. 

In some cases, the service provider may wish to 
grant free Tokens to customers for promotional purpos- 
es. This can be done manually, either to individuals or 
to groups of subscribers, sending a record to the Home 
Unit(s) that they were free and noting this in the data- 
base 4, together with a reason why they were granted. 
Free Tokens issued by the home unit are not subject to 
the Home Unit local credit limit. 

In prize games it is convenient to grant tokens as 
prizes and the most efficient way to do this is to instruct 
the Home Unit to do it itself. 

In the case of a prize game, a conventional scoring 
algorithm can be used to determine the points thresh- 
olds which offer prizes. The central controller 1 will then 
send this threshold information over the air and any 
home units which contain matching scores will display 
a prize symbol in the results screen for that game. 

Home Units that qualify for any prize other than To- 
kens will call in to confirm their qualification and this will 
be handled at the central controller. If the subscriber has 
won tokens, the Home Unit will automatically issue them 
on the spot (by suitably incrementing the token count in 
the control memory 17), telling the central controller 1 it 
has done so on the next occasion it phones in. 

Settling bets will be a similar process. The central 
controller will send out messages confirming results of 
the betting event and Home Units with matching bets 
will pay out, informing the central controller later. This 
will allow punters to bet with their winnings. 

Prize Tokens and Winnings Tokens issued by the 
Home Unit are not controlled by the Home Unit credit 
limit. 



Claims 

1. An interactive communication system, the system 
comprising a central controller; and at least one re- 
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mote unit connected in use to a display device, the 
central controller generating signals in accordance 
with a service function, access to all or part of which 
is restricted, the signals being supplied to the re- 
mote unit(s) for display on the display device, s 
wherein the or each remote unit includes a proces- 
sor, responsive to signals from the central control- 
ler, and being selectively connectable to the central 
controller to transmit information back to the central 
controller, the or each remote unit further compris- io 
ing an input device and a control memory connect- 
ed to the processor, the input device allowing a user 
to enter information, and the control memory storing 
access control data, the processor being respon- 
sive to the access control data to allow a user to is 
gain access to the restricted part of the service func- 
tion, and periodically supplying data to the central 
controller related to said access, wherein the cen- 
tral controller can generate signals which are sup- 
plied to the remote unit(s) to modify the access con- 20 
trol data, and wherein the processor is adapted to 
modify the access control data in the control mem- 
ory to allow additional access, independently of the 
central controller. 

25 

2. A system according to claim 1 , wherein the control 
memory contains data defining a limit to which the 
processor can modify the access control data in the 
control memory to allow additional access in re- 
sponse to a user request. 30 

3. A system according to claim 1 or claim 2, wherein 
the processor is adapted to modify the access con- 
trol data in dependence upon the user's response 

to signals from the central controller. 35 

4. A system according to claim 3, wherein the said sig- 
nals relate to the same or a different service func- 
tion. 

40 

5. A system according to claim 1 or claim 2, wherein 
the processor is adapted to modify the access con- 
trol data in response to a request from a user via 
the input device. 

45 

6. A system according to any of the preceding claims, 
wherein the processor is adapted to communicate 
information to the central controller concerning 
modifications made by the processor to the access 
control data to allow additional access, on the next so 
occasion when other data is communicated to the 
central controller. 

7. A system according to any of the preceding claims, 
wherein the processor is adapted to connect to the 55 
central controller to pass information relating to past 
access to the restricted part of one or more service 
functions when more than a predetermined amount 



of such use has occurred. 

8. A system according to any of the preceding claims, 
wherein the access control data comprises a count 
defining a number of allowed accesses to the re- 
stricted part of the service function. 

9. A system according to claim 8, wherein the proces- 
sor is adapted to decrement the count upon each 
access. 

1 0. A system according to any of the preceding claims, 
wherein the access control data further comprises 
information defining the service function to which 
access is to be allowed. 

11. A system according to any of claims 1 to 9, wherein 
the processor responds to the access control data 
to allow access to more than one restricted access 
service function. 

12. A system according to any of the preceding claims 
for use in conjunction with transmitted, display con- 
trol signals, wherein each remote unit is adapted to 
receive the display control signals and provide a 
corresponding visual display. 

13. A system according to claim 12, wherein the display 
control signals comprise TV broadcast signals, the 
remote unit(s) each including a receiver which re- 
ceives the TV broadcast signals and controls the 
display device accordingly. 

1 4. A system according to any of the preceding claims, 
further comprising means for combining and trans- 
mitting the display control signals and the signals 
from the central controller. 

1 5. A system according to any of the preceding claims, 
wherein the service function is a game. 

16. A remote unit for use in an interactive communica- 
tion system according to any of the preceding 
claims, the remote unit being connected in use to a 
display device and including a processor, respon- 
sive to the signals from a central controller defining 
one or more service functions, access to or all or a 
part of which is restricted, to generate displays on 
the display device and being selectively connecta- 
ble to the central controller to transmit information 
back to the central controller, the remote unit further 
comprising an input device and a control memory 
connected to the processor, the input device allow- 
ing a user to enter information, wherein the control 
memory stores access control data, the processor 
being responsive to the access control data to allow 
a user to gain access to the restricted part of the 
service function, and periodically supplying data to 
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the central controller related to said access and 
wherein the processor is adapted to modify the ac- 
cess control data in the control memory to allow ad- 
ditional access. 

5 

17. A unit according to claim 16, wherein the control 
memory contains data defining a limit to which the 
processor can modify the access control data in the 
control memory to allow additional access in re- 
sponse to a user request. 10 

18. A unit according to claim 16 or claim 17, wherein 
the processor is adapted to modify the access con- 
trol data in dependence upon the user's response 

to signals from the central controller. rs 

19. A unit according to claim 18, wherein the said sig- 
nals relate to the same or a different service func- 
tion. 



20. A unit according to claim 16 or claim 17, wherein 
the processor is adapted to modify the access con- 
trol data in response to a request from a user via 
the input device. 



20 



25 



21 . A unit according to any of claims 1 6 to 20, wherein 
the processor is adapted to communicate informa- 
tion to the central controller concerning modifica- 
tions made by the processor to the access control 
data to allow additional access, on the next occa- 30 
sion when other data is communicated to the central 
controller. 

22. A unit according to any of claims 1 6 to 21 , wherein 
the processor is adapted to connect to the central 35 
controller to pass information relating to past ac- 
cess to the restricted part of one or more service 
functions when more than a predetermined amount 

of such use has occurred. 



40 



45 



23. A unit according to any of claims 1 6 to 22, wherein 
the access control data comprises a count defining 
a number of allowed accesses to the restricted part 
of the service function. 

24. A unit according to claim 23, wherein the processor 
is adapted to decrement the count upon each ac- 
cess. 



25. A unit according to any of claims 1 6 to 24, wherein so 
the access control data further comprises informa- 
tion defining the service function to which access is 

to be allowed. 

26. A unit according to any of claims 1 6 to 24, wherein ss 
the processor responds to the access control data 

to allow access to more than one restricted access 
service function. 



7 



EP 0 858 225 A1 




8 



EP 0 858 225 A1 



Fig.2. 
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Fig.3 (Cont i). 
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